How do I investigate a suspected insider data leak involving someone downloading proprietary customer lists from our Salesforce CRM before leaving the company?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
How do I investigate a suspected insider data leak involving someone downloading proprietary customer lists from our Salesforce CRM before leaving the company?
2 real searches · 1 real-search pass
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 2 queries…
Searches and sources
ChatGPT2 real searches · gpt-6
Salesforce official documentation Event Monitoring report export events URI login history Setup Audit Trail data export security investigation Google ↗
CISA insider threat mitigation incident response preserve evidence employee data exfiltration official guidance Google ↗
- Accessing and Utilizing Event Log Files for Insights · trailhead.salesforce.com
- Auditing · help.salesforce.com
- Event Monitoring · help.salesforce.com
- Salesforce Event Monitoring Frequently Asked Questions · help.salesforce.com
- A Primer on Forensic Investigation of Salesforce Security Incidents · salesforce.com
- Salesforce Security Guide · resources.docs.salesforce.com
- Your Guide to Salesforce Shield · salesforce.com
- Incident Response Patterns | Patterns | Well-Architected Framework · architect.salesforce.com
- Reducing data exfiltration by malicious insiders · ncsc.gov.uk
Queries
2 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
Salesforce official documentation Event Monitoring report export events URI login history Setup Audit Trail data export security investigation OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
CISA insider threat mitigation incident response preserve evidence employee data exfiltration official guidance OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 |